Since WordPress 4.4, oEmbed discovery is enabled for all users and allows embedding of sanitized
iframes. The providers in this list are whitelisted, meaning they are trusted and allowed to
embed any content, such as iframes, videos, JavaScript, and arbitrary HTML.